US 10,476,662 B2Granted

Method for operating a distributed key-value store

AssigneeCity University of Hong Kong

InventorsXingliang Yuan, Yu Guo, Xinyu Wang, Cong Wang

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method for operating a distributed key-value store includes processing a data set comprised of data records each associated with a unique identifier and having one or more values associated with one or more attributes using a private key provided at a client device, thereby partitioning each of the data records based on the identifier and forming a plurality of encrypted identifier-value pairs for distributed storage across a plurality of server nodes operably connectable to the client device. The method also includes building, at the client device, encrypted indexes based on the type of query; and executing a query protocol in response to receiving a query from the client device so as to identify, using the built encrypted indexes, data distributively stored in the server nodes which matches the query. The invention also provides a related system for operating a distributed key-value store.

Claims18

Dependent claims

A method for operating a NoSQL database with distributed key-value store, comprising:

(a) processing a data set comprised of data records, each of the data records having a unique identifier and including a respective value associated with one or more attributes using a private key provided at a client;
(b) partitioning the data records based on the identifier and forming a plurality of encrypted identifier-value pairs for distributed storage across a plurality of servers operably connected to the client device;
(c) storing the encrypted identifier-value pairs at the servers, wherein the distribution of the encrypted identifier-value pairs to the servers based on a consistent hashing ring maintained at the client device and which indicates a range of identifiers associated with each of the servers;
(d) building, at the client device, encrypted indexes for the encrypted identifier-value pairs;
(e) storing, at the servers, the respective built encrypted indexes, wherein each server stores local indexes associated with the local encrypted identifier-value pairs and not with encrypted identifier-value pairs in other servers;
(f) executing a query protocol in response to receiving a query from the client device so as to identify, using the built encrypted indexes, data distributively stored in the servers and which matches the query, wherein the execution comprises:
generating, at the client device, a token set including a plurality of tokens based on a condition attribute of the query;
transmitting the token set to each of the servers;
processing the tokens at each of the servers using local indexes associated with each respective server;
providing one or more encrypted identifiers of encrypted matched record to the client device;
decrypting, at the client device, the one or more encrypted identifiers;
and
generating, at the client device, labels for obtaining the matched record.

10 more elements

A system for operating a NoSQL database with distributed key-value store, comprising:

a client device with a processor and a memory, configured to:
process a data set comprised of data records, each of the data records having a unique identifier and including a respective value associated with one or more attributes using a private key provided at the client device;
partition the data records based on the identifier and form a plurality of encrypted identifier-value pairs for distributed storage across a plurality of servers operably connected to the client device;
and
build encrypted indexes for the encrypted identifier-value pairs;
a plurality of servers each having a processor and a memory, configured to:
store the encrypted identifier-value pairs, wherein the encrypted identifier-value pairs are distributively stored at the servers based on a consistent hashing ring maintained at the client device and which indicates a range of identifiers associated with each of the servers;
store the respective built encrypted indexes;
wherein each server stores indexes associated with the local encrypted identifier-value pairs and not with encrypted identifier-value pairs in other servers;
wherein the client device and the servers are arranged to execute a query protocol in response to receiving a query from the client device so as to identify, using the built encrypted indexes, data distributively stored in the servers and which matches the query,
wherein the client device is arranged to:
generate a token set including a plurality of tokens based on a condition attribute of the query;
transmit the token set to each of the servers;
decrypt one or more encrypted identifiers of encrypted matched record provided from the servers;
and
generate labels for obtaining the matched record;
and
wherein each of the servers are arranged to:
process the tokens using local indexes associated with each respective server;
and provide one or more encrypted identifiers of encrypted matched record to the client device.

17 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/483,052Filed 10 Apr 2017
Published: US 2018/0294952 A111 Oct 2018
Granted: 12 Nov 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 9/06
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: the encryption apparatus…
G06F 12/1408
Protection against unauthorised use of memory or access to memory: by using cryptography
G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 21/6227
To a system of files or objects, e.g. local or distributed file system or database: where protection concerns the structure of data, e.g. records,…